Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/1B05F788A4FA11F0885D037BDAE4EC9C.roa
File: 1B05F788A4FA11F0885D037BDAE4EC9C.roa (raw, json)
Hash identifier: GjkulRsKKJbZVrp77ugYgp/kqLitaMudIz+NNcc4dbE=
Subject key identifier: 70:EC:0B:FA:D3:78:01:29:39:DB:EE:E7:EF:E7:5E:AE:3B:B3:BE:33
Certificate issuer: /CN=F3619C8CAF/serialNumber=46D405558001A8B029B96AB13406D69A1DD74045
Certificate serial: 01B9
Authority key identifier: 46:D4:05:55:80:01:A8:B0:29:B9:6A:B1:34:06:D6:9A:1D:D7:40:45
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RtQFVYABqLApuWqxNAbWmh3XQEU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/1B05F788A4FA11F0885D037BDAE4EC9C.roa
Signing time: Thu 09 Oct 2025 10:24:15 +0000
ROA not before: Thu 09 Oct 2025 10:24:09 +0000
ROA not after: Wed 31 Oct 2035 10:24:09 +0000
asID: 36974
IP address blocks: 41.78.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.mft
rsync://rpki.afrinic.net/repository/afrinic/RtQFVYABqLApuWqxNAbWmh3XQEU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 04:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3619C8CAF, serialNumber=46D405558001A8B029B96AB13406D69A1DD74045
Validity
Not Before: Oct 9 10:24:09 2025 GMT
Not After : Oct 31 10:24:09 2035 GMT
Subject: CN=68e78d4f-a38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:fb:3a:72:15:a1:f4:1e:59:80:8f:25:0e:
83:23:96:aa:27:2c:6a:96:1c:83:73:b8:ba:7e:a7:
19:06:4c:21:9f:bc:6b:39:15:bb:ff:9e:a1:8e:46:
f8:b1:ea:70:0e:e1:ef:f4:1b:d2:b3:a1:89:ba:b5:
47:14:a9:f4:86:bd:85:24:91:c5:34:75:b0:14:61:
a5:59:8a:3d:d9:6b:67:a8:5a:70:2b:a1:dd:34:e8:
50:44:ef:70:53:8f:3a:11:3f:a2:7e:73:b6:a8:1a:
88:bb:64:a6:2b:18:e4:23:f7:e3:80:a5:ef:a6:6e:
2f:97:15:5a:1e:55:45:39:7c:bb:59:48:2d:5e:32:
60:1b:d3:d4:a6:17:4e:94:d7:19:54:c4:6c:be:1c:
09:24:7f:65:cd:d6:cc:8c:d6:23:b8:22:43:06:2c:
8d:71:72:e1:cb:8a:4e:52:9d:79:fb:b0:82:e4:9c:
b6:15:bc:96:fa:ce:62:14:8e:27:14:59:b6:89:b4:
02:24:27:57:66:0c:68:df:9b:4f:75:b0:47:be:fa:
f5:4c:7c:20:0a:7b:98:78:2d:1c:1a:04:5f:ce:4e:
90:e2:3d:43:a1:7a:65:b4:83:41:77:7d:e9:3f:39:
35:99:36:0f:bc:d1:2c:18:e0:82:1c:3a:1e:0c:e3:
00:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EC:0B:FA:D3:78:01:29:39:DB:EE:E7:EF:E7:5E:AE:3B:B3:BE:33
X509v3 Authority Key Identifier:
keyid:46:D4:05:55:80:01:A8:B0:29:B9:6A:B1:34:06:D6:9A:1D:D7:40:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RtQFVYABqLApuWqxNAbWmh3XQEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/1B05F788A4FA11F0885D037BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.92.0/22
Signature Algorithm: sha256WithRSAEncryption
32:17:6c:51:e7:39:78:28:f5:e5:6e:71:ae:2b:23:44:5e:c5:
b7:a2:23:52:24:15:b9:70:ab:33:be:cf:05:2d:8d:70:74:34:
af:1e:18:63:39:18:5f:69:15:58:67:1b:0c:b2:55:65:9d:8a:
26:d6:5d:54:47:6a:e2:77:8c:a3:b2:78:df:db:82:c3:d5:3d:
55:c1:4e:00:a5:73:e2:13:2b:a9:72:65:37:35:06:cc:87:f3:
3b:17:24:8e:ab:5d:d4:e3:b8:40:72:60:bc:8e:f2:4e:5b:ef:
c0:d7:4b:55:eb:e4:a7:08:80:d5:93:c1:42:c3:80:e3:3e:39:
4d:12:62:b4:5d:b3:6c:68:ee:9d:97:77:7d:82:ec:f0:5d:ef:
25:9f:ad:d5:35:55:89:3b:c7:b8:59:21:45:e8:4e:0a:65:ca:
8f:77:81:91:f6:dc:68:37:70:b9:ea:a7:78:2b:5e:77:ee:7d:
3a:9b:68:59:1c:4e:ad:9d:2a:01:22:cf:3d:ae:37:c5:4a:88:
f9:2d:94:da:cd:02:1a:53:c3:21:e1:27:09:d6:e4:9f:90:06:
52:ab:e5:bb:4d:dc:ef:18:56:53:ed:7b:2a:62:70:f9:51:08:
28:fa:75:2e:91:f2:b1:53:fc:1e:b8:61:ad:aa:f0:f7:e4:b1:
ea:e0:27:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:18:07 2025 by rpki-client